📅 Book a 30-min Demo📞 Call/text (571) 293-0242
Connector · Customer relationship management (CRM)

Salesforce MCP Server & Agent Skill

Last updated

ibl.ai publishes a free Salesforce agent skill: a SKILL.md that teaches an AI agent to read and write Salesforce data and expose it as an MCP tool. Download it, connect your own Salesforce credentials, and run the agent on ibl.ai Agentic OS, where you own all the code and the data.

Salesforce (Sales Cloud, Service Cloud) is a CRM platform. An org stores standard and custom objects such as accounts, contacts, leads, opportunities and cases, plus the automation (Flows, Apex) built on them.

What is the Salesforce API, and what can an agent read from it?

REST API gives CRUD on standard and custom objects (sObjects), object metadata, SOQL query and search, and org limits. Bulk API 2.0 runs asynchronous CSV insert, upsert, update, delete and query jobs for large datasets.

  • API: Salesforce REST API, Bulk API 2.0 (REST)
  • Access: Issued by your administrator
  • Base URL: https://{MyDomainName}.my.salesforce.com/services/data/v{XX.X}/
  • Authentication: OAuth 2.0 via an External Client App (or existing connected app); OAuth 2.0 authorization code with PKCE (Hosted MCP Servers)

Needs an org edition with API access and a user with the API Enabled permission. An admin registers an External Client App for OAuth; new connected apps are restricted as of Spring '26, existing ones keep working.

Requests carry an OAuth 2.0 access token as Authorization: Bearer. The OAuth flow is chosen on the External Client App. Hosted MCP Servers use per-user OAuth 2.0 with PKCE and cannot use connected apps.

What can an agent read from Salesforce?

  • Records (any sObject) — Read accounts, contacts, opportunities, cases and custom objects via sObject resources under /services/data/vXX.X/.
  • SOQL query results — Query and search records; Bulk API 2.0 query jobs handle result sets of 2,000 records or more asynchronously.
  • Object metadata — Describe objects and fields to learn the org's schema before reading or writing.
  • Org limits — The /limits resource reports remaining API allocation; REST responses include a Sforce-Limit-Info header.

What can an agent write to Salesforce?

  • Create or update records — POST/PATCH on sObject resources; field-level security and sharing rules apply.
  • Bulk ingest jobs — Bulk API 2.0 insert, upsert or update jobs from CSV for large datasets.
  • Delete records — DELETE on an sObject record, or a Bulk API 2.0 delete job. Confirm with the user first.

Limits: Enterprise Edition: 100,000 calls per 24h plus 1,000 per Salesforce license (Unlimited/Performance: 5,000 per license). Production orgs allow 25 concurrent requests running 20s or longer. REST call timeout is 10 minutes.

CRM records hold personal data about customers and prospects (names, emails, phone numbers) plus deal and case history. Treat as confidential business data and personal data under privacy law.

How do I connect Salesforce to an AI agent over MCP?

Salesforce, Inc. publishes an official MCP server: Salesforce Hosted MCP Servers.

Admin-enabled standard servers (SObject All, Reads, Mutations, Deletes, Data 360, Tableau Next) plus custom servers; per-user OAuth with PKCE via an External Client App.

You can register that server on ibl.ai as it is, or use the SKILL.md below when you want the agent to call the Salesforce REST API, Bulk API 2.0 directly.

On ibl.ai an MCP connection is three records, and a working integration always needs all three:

  1. Register the server — POST …/mcp-servers/ with its URL, a transport (sse, websocket or streamable_http) and an auth_type of none, token or oauth2.
  2. Create a connection that holds the credential, scoped to the whole organization (platform), to a single agent, or to each user (user).
  3. Enable it on the agent — mcp-tool in tool_slugs and the server id in mcp_servers. Both lists are replaced, not merged, so read the settings first.

Salesforce supports per-user OAuth, so the server can use auth_type=oauth2 with auth_scope=user: each person connects their own Salesforce account in the chat the first time the agent needs it.

The field reference is in MCP server connections, and the /iblai-api-agent-mcp skill runs all three steps from a coding agent.

What does the Salesforce agent skill do?

The Salesforce skill is one SKILL.md file named iblai-connect-salesforce. It gives an agent the auth conventions, what to read, which writes need a person's confirmation, the ibl.ai MCP wiring, example prompts and guardrails.

Download the Salesforce SKILL.md

Save it as .claude/skills/iblai-connect-salesforce/SKILL.md, or in your agent's skills folder. The ibl.ai platform skills it calls come from one install:

$ npx skills add iblai/vibe --all

This connector skill is a starting point maintained on ibl.ai, not part of the iblai/vibe repository.

It was checked against Salesforce, Inc.'s documentation on October 20, 2026. Test it against your own Salesforce setup before you rely on it.

What can I ask a Salesforce agent to do?

  • “List my open opportunities closing this quarter over $50,000, sorted by amount”
  • “Summarize every case logged for Acme Corp in the last 30 days”
  • “Update the stage on opportunity 006XXXXXXXXXXXX to Negotiation and add a next step”
  • “How many API calls does our org have left today?”

How do I run a Salesforce agent on ibl.ai?

Agentic OS is where the agent runs on ibl.ai: it holds the Salesforce MCP connection, the model the agent uses, its instructions and its conversation history.

On ibl.ai you own all the code and the data, run it model-agnostic across any LLM, and pay with no per-seat pricing — so you can deploy anywhere, from your own cloud to a fully air-gapped network.

Which ibl.ai agents work with Salesforce data?

Which ibl.ai platform skills does a Salesforce agent use?

What else should I know before connecting Salesforce to an AI agent?

Is there an official Salesforce MCP server?

Yes. Salesforce, Inc. publishes Salesforce Hosted MCP Servers.

You can register it on ibl.ai as an MCP server, or use the SKILL.md when you want the agent to call the Salesforce REST API, Bulk API 2.0 directly.

Who can get Salesforce API credentials?

Needs an org edition with API access and a user with the API Enabled permission. An admin registers an External Client App for OAuth; new connected apps are restricted as of Spring '26, existing ones keep working.

Does Salesforce data leave my infrastructure when an ibl.ai agent uses it?

On ibl.ai, you own all the code and the data. Self-hosted in your cloud or data center, the agent, its MCP connections and its conversation logs stay inside your perimeter.

Because the platform is model-agnostic, you can point the agent at a model you host, so Salesforce records need not reach a third-party model provider.

Is the Salesforce agent skill free to use?

Yes. The SKILL.md is a free download with no sign-up. It assumes you already have Salesforce credentials, and your agreement with Salesforce, Inc. still governs how you use its API.

Which other data sources can an AI agent connect to alongside Salesforce?

Which other Enterprise systems have a connector?

Every connector, grouped by sector, is on the connectors hub.